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Cloudflare One 
for Data Protection 


Better network architecture for more effective, more 
productive, and more agile data protection. _ je 


Unified protection for data 


everywhere 


Modern data risks demand modern security 
Data is exploding in volume, variety, and velocity today, 
and organizations face escalating risks posed by: 


Sprawling cloud & SaaS environments 
L including opaque emerging Al tools like ChatGPT 
L leading to the exposure of precious source code 


Cloudflare One's data protection suite is built to stay 


e 


— 


at the forefront of these distinctly modern risks. 


By unifying point solutions onto a single platform and 


network, Cloudflare delivers data protection that is: 


More effective by simplifying connectivity and 


policy management 


One Security Services Edge (SSE) to protect data 
across web, SaaS, and private apps 


Progressively adopt Cloudflare on your SSE journey to: 


e More productive by ensuring fast, reliable, and 1 Secure access to data with Zero Trust 
consistent uae experiences everywhere 2. Stop threats like phishing and ransomware 
o  Moreagile by Innovating Tapidiy tomeget your 3. Detect and lock down your most sensitive info 


evolving security requirements 


Navigate escalating data risks... 


Sprawling SaaS footprint 


82% 


of breaches involved data 
stored in cloud environments.’ 


And of course, data breach 
costs continue to rise - up 15% 
over the past 3 years. ' 


New, diverse regulations 


71% 


of all countries have legislation 
to protect data and privacy.” 


In the U.S., 11 states now have 
comprehensive data protection 
laws - up from 3 in 2021.3 
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Digital transformation 


89% 


of ClSOs say that moving fast 
with digital transformation 
initiatives introduces 
unforeseen risks in securing 
company data‘ 
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Cloudflare One for Data Protection | Key use cases 


Use case #1: Secure developer code 


Problem 


Code can be exposed or targeted for theft across 
many developer tools, including in plain sight 
locations like public repositories. 


Solution 


Scan for and remediate misconfigured public 
repositories like GitHub that risk code leaks. Detect 
source code in up/downloads and apply controls. 


— GitHub 
— ®™GitLab 


</> 


— W Bitbucket 


Use case #2: Data exposure visibility and risk management 


—> G OpenAI 


> +, Bard 


— @® GitHub Copilot 


Use case #3: Comply with regulations 


Problem 


Stricter and more expansive legal requirements for 
companies to keep data safe and private, with rising 
fines for noncompliance. 


Solution 


Identify and apply controls to regulated data classes 
(PII, health, financial). Maintain detailed audit trails via 
logs and further SIEM analysis. Reduce attack surface 
with a comprehensive Zero Trust security posture. 
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Problem 


Data spans diverse SaaS and cloud environments, 
unsanctioned shadow IT, and emerging Al tools like 
ChatGPT, creating more risk for leaks. 


Solution 


Scan SaaS suites for misconfigurations with integrated 
DLP detections for sensitive data. Gain visibility across 
unsanctioned app usage, then allow, block, isolate, or 
apply Zero Trust controls to access them. 


v GDPR v DPDP 

v CCPA v CPRA 

v GLBA v PCI DSS 
v HIPAA v ISO 


v Many more! 
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Cloudflare One for Data Protection | How it works 


How it works 


One unified platform 


Cloudflare converges visibility and 
controls across DLP, CASB, ZTNA, SWG, 
RBI, and email security services onto a 
single platform for simpler management. 


One programmable network 


One control plane with services built on 
GX) our own developer platform to enforce 
controls for data in transit, in use, and at 
wea rest across all enforcement points — 
web, SaaS, or private app environments. 


7 . 
Private 
. 


Example controls with composable services 


Apply DLP for data in transit and secure access Isolate apps to secure data in use 


e Scan for sensitive data in traffic and files, and e Block copy/paste, up/download, printing, 
configure block policies with DLP. keyboard inputs — all without a device client. 
Discover and manage shadow IT with CASB. Clientless deployment is perfect for 
Secure access to data in apps with ZTNA. unmanaged devices, third party users, and Al 
Block personal tenants of SaaS apps to tools like ChatGPT. 
prevent data exfiltration. Apply DLP policies within isolated apps. 


Protect data at rest in SaaS apps Integrate to streamline compliance and controls 


e Scan SaaS apps for suspicious activity, Logpush to your preferred SIEM for 
misconfigurations, and sensitive data. correlation and audit. 
Take prescriptive steps to remediate Integrate with 18 of the most popular SaaS 
risks via SWG policies. suites for APl-based CASB scans. 
Sync continuously with Microsoft Information 
Protection (MIP) labels for your DLP policies. 
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Cloudflare One for Data Protection | Customer value 


Better data protection with Cloudflare 


Om oQo 


More effective More productive 
by reducing complexity by improving user experiences 


Simplify connectivity with many Our network is everywhere, 

flexible options to send traffic to ensuring controls are enforced 

Cloudflare for enforcement. with single-pass inspection 
close to end users and data 


Use APl-based scans for SaaS 
wherever they are. 


suites or clientless modes for 


ZTNA and RBI to secure app Reliable and unintrusive, 
access. To forward proxy traffic, | end-user experiences mean 
use one device client or wide enforcing data controls never 
area network on-ramps across disrupts work. Proven faster 
security services. than SSE peers. 


What customers are saying 


-S 


More agile 
by innovating with velocity 


Our programmable network 
architecture enables us to build 
capabilities quickly, so you can 
adapt to new risks with agility. 


We rapidly adopt adopt new 
security standards and 
protocols (like IPv6-only 
connections or HTTP/3 
encryption) so data protection 
remains up-to-date. 


Other use cases 


“Today, Cloudflare One helps prevent our users e Fortune 500 natural gas company to 
from sharing sensitive data and code with tools protect contractor access to data 


like ChatGPT and Bard, enabling us to take 
advantage of Al safely... Going forward, we are 
excited for Cloudflare’s continued innovations to 


e Major US job site to secure code and 
personal information 


protect data, and in particular, their vision and e Regional US airline to mitigate risks of 
roadmap for services like DLP and CASB.” exposing customer data 


Tanner Randolph e Australian healthcare company to 
Chief Information Security Officer (CISO) protect regulated medical data 


Applied Systems e US medical devices manufacturer 
Read the case study to streamline HIPAA compliance 
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Cloudflare One for Data Protection | How to get started 


Common adoption paths 


Phase 1: Secure data in web and SaaS apps 


Detect and 
control sensitive 
data moving into 


Detect inappropriate Detect 

data sharing and unsanctioned 
user access in SaaS and sanctioned 
apps SaaS app usage 


Secure access to 
self-hosted private 
/ cloud apps and 
apply data controls 


Phase 2: Secure data in private apps 


Isolate threats of 
sensitive data 
leaving SaaS 
any SaaS apps apps 


Isolate threats 
of sensitive 
data leaving 
private apps 


Getting started 


PROVE... 


value by requesting a 
consultative workshop 


ENGAGE... 


with how the platform 
works in this demo 


LEARN... 


about escalating data 
risks in this infographic 


Cost of a Data Breach Report 

2023, IBM 

2. United Nations Conference on 
Trade & Development 

3. International Association of 
Privacy Professionals (IAPP) 

4. 2023 “State of the CISO” report 
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